Static task
static1
Behavioral task
behavioral1
Sample
1faf4fb9446c50a59645fe3f0cf03055060a3e473a4be824d908a08ad1ea5066.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1faf4fb9446c50a59645fe3f0cf03055060a3e473a4be824d908a08ad1ea5066.exe
Resource
win10v2004-20220812-en
General
-
Target
1faf4fb9446c50a59645fe3f0cf03055060a3e473a4be824d908a08ad1ea5066
-
Size
80KB
-
MD5
0b054a2b087f2134b405a4bbd4457020
-
SHA1
17b0432d1cc866667a8a6fdfd714b79adbce6438
-
SHA256
1faf4fb9446c50a59645fe3f0cf03055060a3e473a4be824d908a08ad1ea5066
-
SHA512
60296feab8f59e31b3e786edcf76544fb5667c739f8dfbfcdf408c09abd597a72d727ef073fbe0ea98bac439c2ac3b7e674430305d8f0e19663cf953a9a7588c
-
SSDEEP
1536:1nyICafba4stLb+Z7f8iTa3hmkD5zts0+fim07oMpWX63LkIGwrfV9zULRi:zCaf+BVCV13L0sMpWK3LkI7rjzULRi
Malware Config
Signatures
Files
-
1faf4fb9446c50a59645fe3f0cf03055060a3e473a4be824d908a08ad1ea5066.exe windows x86
9aa29dcead31601bf23eddb79aa13227
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZSeek
gdi32
CloseMetaFile
imm32
ImmGetDefaultIMEWnd
msvbvm60
ord183
ord552
ord669
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord714
ord717
ProcCallEngine
ord644
ord570
ord100
ord432
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ